Results 1 to 5 of 5
-
10-14-2010, 12:47 AM #1Web Hosting Master
- Join Date
- May 2009
- Location
- Greece
- Posts
- 1,047
Is it secure to use https as ssl is cracked?
Hello
Is it secure to use https on whm access as ssl is cracked using the software ssl strip?
Thank you
-
10-17-2010, 03:00 AM #2Intangible Asset Appraiser
- Join Date
- Mar 2009
- Location
- Austin Tx
- Posts
- 2,007
sslstrip would not be too much of a concern unless you do major e-commerce, or are a bank, paypal...etc. It wouldn't be worth the time and risk to hit most e-commerce sites. It's not really cracked, that implies they unencrypted something, not just listen for an https call on the network and inject a re-direct, of which, to be practical, the target has to be constructed, hosted, maintained to look very similar to the site at which user was expecting to land.
This is the best signature in the world....Tribute!
(It is not the best signature in the world, no. This is just a tribute)
-
10-17-2010, 03:17 AM #3Aspiring Evangelist
- Join Date
- Oct 2009
- Posts
- 416
It doesn't actually crack SSL, it just sort spoofs it's way around it which, as mugo mentioned, is not trivial to setup.
In any case, using HTTPS is still much safer than not using it, and there are no real alternatives at the moment.
-
10-17-2010, 10:53 AM #4Web Hosting Master
- Join Date
- May 2009
- Location
- Greece
- Posts
- 1,047
Ok thanks
-
10-18-2010, 12:32 PM #5Newbie
- Join Date
- Oct 2010
- Location
- EU
- Posts
- 12
As xnpu says, SSL is better than nothing.
You may also consider to allow WHM access only from your IP.
Similar Threads
-
cURL with OpenSSL and Secure HTTPS
By AndreF in forum Programming DiscussionReplies: 6Last Post: 06-19-2008, 08:15 AM -
SSL on https://domain.com vs https://www.domain.com
By sbogde in forum Hosting Security and TechnologyReplies: 3Last Post: 10-02-2007, 05:40 AM -
secure https directory accessable with http
By c_developer in forum Hosting Security and TechnologyReplies: 5Last Post: 09-14-2006, 01:40 PM -
Cpanel - Https (secure). Where are they?
By matrixman in forum Hosting Software and Control PanelsReplies: 1Last Post: 03-07-2005, 10:27 PM -
https://secure.domain.com is not working.
By astraler2k in forum Hosting Security and TechnologyReplies: 4Last Post: 11-04-2002, 12:41 PM